POST to /encrypt always comes back with KeyNotInstalledException #767

jaurakunal · 2017-08-05T00:33:22Z

Hi,

I'm using the Spring Cloud Config (Dalston.SR2) to use a git repo to get the application properties. All works fine till i try and use the /encrypt endpoint. With Dalston.SR2, the call to /encrypt ALWAYS comes back with a

{
  "description": "No key was installed for encryption service",
  "status": "NO_KEY"
}

I've made sure that the environment variable ENCRYPT_KEY is set properly.

If I change the version to Camden.SR5. The same configuration works fine and I can use both the /encrypt & /decrypt endpoints. I'm not sure if there's anything else that I need to do apart from

Copy the JCE 8 files to \jre\lib\security
Set the environment variable ENCRYPT_KEY
Hit the /encrypt endpoint with a POST request

Here's a copy of my pom xml.

<?xml version="1.0" encoding="UTF-8"?>
<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
	<modelVersion>4.0.0</modelVersion>

	<groupId>com.photolove</groupId>
	<artifactId>pl-config-server</artifactId>
	<version>0.0.1-SNAPSHOT</version>
	<packaging>jar</packaging>

	<name>pl-config-server</name>
	<description>Application Config Server</description>

	<parent>
		<groupId>org.springframework.boot</groupId>
		<artifactId>spring-boot-starter-parent</artifactId>
		<version>1.5.6.RELEASE</version>
		<relativePath/> <!-- lookup parent from repository -->
	</parent>

	<properties>
		<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
		<project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
		<java.version>1.8</java.version>
		<spring-cloud.version>Dalston.SR2</spring-cloud.version>
	</properties>

	<dependencies>
		<dependency>
			<groupId>org.springframework.cloud</groupId>
			<artifactId>spring-cloud-config-server</artifactId>
		</dependency>

		<dependency>
			<groupId>org.springframework.cloud</groupId>
			<artifactId>spring-cloud-starter-config</artifactId>
		</dependency>

		<dependency>
			<groupId>org.springframework.boot</groupId>
			<artifactId>spring-boot-starter-test</artifactId>
			<scope>test</scope>
		</dependency>
	</dependencies>

	<dependencyManagement>
		<dependencies>
			<dependency>
				<groupId>org.springframework.cloud</groupId>
				<artifactId>spring-cloud-dependencies</artifactId>
				<version>${spring-cloud.version}</version>
				<type>pom</type>
				<scope>import</scope>
			</dependency>
		</dependencies>
	</dependencyManagement>

	<build>
		<plugins>
			<plugin>
				<groupId>org.springframework.boot</groupId>
				<artifactId>spring-boot-maven-plugin</artifactId>
			</plugin>
		</plugins>
	</build>


</project>

Any help is greatly appreciated. :-)

Cheers
Kunal

The text was updated successfully, but these errors were encountered:

ryanjbaxter · 2017-08-07T15:03:12Z

Yes this is a known issue in Dalston.SR2. #760 You can either try Dalston.SR1 or Dalston.BUILD-SNAPSHOT. We will be releasing Dalston.SR3 shortly with the fix in it.

jaurakunal · 2017-08-07T16:31:19Z

@ryanjbaxter Thanks for the tip :-)

Fydon · 2017-08-29T09:22:27Z

@ryanjbaxter Was this fixed in Dalston.SR3, as I'm still receiving this error with that version?

Dalston.BUILD-SNAPSHOT is using Spring Cloud Config 1.3.3.BUILD-SNAPSHOT and I don't experiencing this problem with that version. There hasn't been a new release of Spring Cloud Config since Dalston.SR2.

ryanjbaxter · 2017-08-31T00:10:25Z

@Fydon unfortunately we did not release spring cloud config for Dalston.SR3, it was a mistake on our part. The fix will be included in Dalston.SR4, sorry about that.

…#767

…add config server encryption module.

Dr4K4n · 2017-10-29T22:28:16Z

just wanted to add that this is still an issue with Dalston.SR4. I've downgraded to Camden.SR7 for now. This also fixed another problem of mine. While using a keystore and {cipher}'d passwords, config server was returning the hash as the password, simply removing the {cipher} prefix.

Fydon · 2017-10-30T09:05:57Z

@Dr4K4n This issue was fixed in Spring Cloud Config 1.3.3.BUILD-SNAPSHOT, which is now Spring Cloud Config v1.3.3.RELEASE, which is a part of Spring Cloud Dalston.SR4. Please try Dalston.SR4 again and see if you experience this issue.

Dr4K4n · 2017-11-01T22:38:09Z

I've setup i little example project to illustrate the problem, simply build the application with maven und test with test.sh. On my machine it works with Dalston.SR4, but not with Camden.SR7.
https://github.com/Dr4K4n/configserver-767

Dr4K4n · 2017-11-02T08:15:50Z

I did some more testing with different Versions of Spring Cloud Config
Working: 1.2.3 (Camden.SR7), 1.3.0, 1.3.1 (Dalston.SR1)
Not Working: 1.3.2 (Dalston.SR2, Dalston.SR3), 1.3.3 (Dalston.SR4)

Dr4K4n · 2017-11-02T08:34:23Z

I've further investigated, the underlying problem seems to be that the KeyProperties in EncryptionAutoConfiguration$DefaultTextEncryptorConfiguration are not read from my application.properties in the affected versions. Hope this info helps pinpointing the source of the problem, my knowledge ends here...

spencergibb · 2017-11-02T10:12:10Z

Needs to be in bootstrap.properties

mahg007 · 2017-11-28T05:53:29Z

@spencergibb thanks.

Nyamkhuub · 2019-07-05T01:13:39Z

if you write in the application yaml/properties, get this error. So, a simple solution is just creating bootstrap yaml/properties file.

DonHamzovic · 2020-11-30T23:55:51Z

Hi everyone I have the same problem using java 11 and spring-cloud.version 2020.0.0-M5 is there any alternative version that works

anikanchan · 2021-01-19T05:54:00Z

Try 20.0.0 for now.

ryanjbaxter closed this as completed Aug 7, 2017

ryanjbaxter added the duplicate label Aug 7, 2017

dschadow added a commit to dschadow/CloudSecurity that referenced this issue Sep 10, 2017

Set to Dalston.SR1 as workaround for spring-cloud/spring-cloud-config…

57d3e75

…#767

heyitsaakash mentioned this issue Sep 26, 2017

Encryption Issue: No Key was installed for encryption service #800

Closed

bruce-wan added a commit to bruce-wan/spring-cloud-study that referenced this issue Sep 29, 2017

downgrade to Camden.SR7 due to spring-cloud/spring-cloud-config#767. …

e52613a

…add config server encryption module.

syr mentioned this issue Oct 5, 2017

Decrypt returns wrong value for secrets ending with '=' or '+' #794

Closed

Dr4K4n mentioned this issue Nov 2, 2017

encrypt.* config needs to be in bootstrap.yml #837

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

POST to /encrypt always comes back with KeyNotInstalledException #767

POST to /encrypt always comes back with KeyNotInstalledException #767

jaurakunal commented Aug 5, 2017

ryanjbaxter commented Aug 7, 2017 •

edited

Loading

Uh oh!

jaurakunal commented Aug 7, 2017

Uh oh!

Fydon commented Aug 29, 2017 •

edited

Loading

Uh oh!

ryanjbaxter commented Aug 31, 2017

Uh oh!

Dr4K4n commented Oct 29, 2017

Uh oh!

Fydon commented Oct 30, 2017

Uh oh!

Dr4K4n commented Nov 1, 2017

Uh oh!

Dr4K4n commented Nov 2, 2017

Uh oh!

Dr4K4n commented Nov 2, 2017 •

edited

Loading

Uh oh!

spencergibb commented Nov 2, 2017

Uh oh!

mahg007 commented Nov 28, 2017 •

edited by spencergibb

Loading

Uh oh!

Nyamkhuub commented Jul 5, 2019

Uh oh!

DonHamzovic commented Nov 30, 2020

Uh oh!

anikanchan commented Jan 19, 2021

Uh oh!

POST to /encrypt always comes back with KeyNotInstalledException #767

POST to /encrypt always comes back with KeyNotInstalledException #767

Comments

jaurakunal commented Aug 5, 2017

ryanjbaxter commented Aug 7, 2017 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

jaurakunal commented Aug 7, 2017

Uh oh!

Fydon commented Aug 29, 2017 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

ryanjbaxter commented Aug 31, 2017

Uh oh!

Dr4K4n commented Oct 29, 2017

Uh oh!

Fydon commented Oct 30, 2017

Uh oh!

Dr4K4n commented Nov 1, 2017

Uh oh!

Dr4K4n commented Nov 2, 2017

Uh oh!

Dr4K4n commented Nov 2, 2017 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

spencergibb commented Nov 2, 2017

Uh oh!

mahg007 commented Nov 28, 2017 • edited by spencergibb Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Nyamkhuub commented Jul 5, 2019

Uh oh!

DonHamzovic commented Nov 30, 2020

Uh oh!

anikanchan commented Jan 19, 2021

Uh oh!

ryanjbaxter commented Aug 7, 2017 •

edited

Loading

Fydon commented Aug 29, 2017 •

edited

Loading

Dr4K4n commented Nov 2, 2017 •

edited

Loading

mahg007 commented Nov 28, 2017 •

edited by spencergibb

Loading